skysight-inc/HackerNews huggingface dataset:
That reminds me of using the undelete utility that came around the Windows 3.1/DOS 6.2 sort of time. All the files it would offer to recover had file names like "testdoc.do?", and if you didn't set the final character it created a file with a wildcard in the name.
Our Javascript Coding Challenge Starts Tomorrow 10AM PST
I would rather say 'Never give your information to a startup that does not handle it responsibly'. Not every startup is irresponsible with data.

In this case you have a strong point. Good work finding the security issue and reporting it.
This is so cool. Will be great training for living on a spacecraft someday soon.
Selling your car at a price above whatever is left of your loan, does not mean you've made a profit!
Your assuming our descendants aren't living in a post apocalyptic dystopia where civilized society is little more than a fairytale. We may seem like gods to them. And it may be much closer than people expect, perhaps hundreds not thousands of years.
IE4 ran on Solaris and HP/UX.
As I understand it, almost every cancer treatment consists in gradually killing the patient in such a way that the cancer dies, hopefully before the healthy tissue, and then nursing the patient back to health. If we ever find a better approach, people will be utterly horrified at chemo and radiation therapy.
Why it doesn't make sens for Google to be a Carrier
As a consequence of living an atypical life, I have a somewhat dimmer view of spam filters. I don't get spam, but I also don't get genuine email from people I've actually corresponded with in the past. Seriously... if I maintain correspondence with a small set of qq numbers, and another qq number emails me, giving the exact same name as a different email account which I've written back and forth to... I shouldn't even see this new message, because it came from qq? This is the state of the art in gmail?

And Gandi's webmail service won't even file mail from China as spam... it won't deliver it at all.
I'm sorry man, but this kind of mistake is unacceptable even for a prototype. This is basic authentication and access control stuff. You'd at least expect this to be implemented if you're giving them your email, needless to say amazon token.

The problem with this is that people become more skeptical in general about new products/companies, which is bad for the community as a whole.

The issue here is how do you deal with this kind of thing? Assuming it is in fact bad for others who are trying to get people to test their prototypes, how do we help avoid basic pitfalls like this one? This could be a service...
It sounds like it wasn't launched yet. The founders say they built it for themselves and their friends to start. Someone discovered the URL and posted it to Hacker News.

It should not have been on the public internet without access control for editing/viewing personal information like this - as soon as a site is visible on the internet there are bots trying all conceivable urls on it and scraping for information. If you look in your logs for any server you'll find all sorts of php,aspx etc urls as bots try to find vulnerabilities, no matter what you're running. I'm sure there'll be some Rails scrapers out there too though perhaps they're not too common yet.

There are probably a lot of other holes if they left the user security so wide open.
Thanks for making this. I live in Dallas and fly out of Love Field frequently and use SW every chance I get.

Hope this stays around.
Great combo of design skills and front end development skills
It may have been a prototype they quickly wrote, and planned to do a heartier implementation later. And when they suddenly got onto HN's front page, a whole bunch of excitement happened and they completely forgot that this was just a prototype.

"Pushing it to a public server" is really minor. Mozilla had this issue, too, when they had a new filename technically available on a server and someone jumped the gun and told the whole world that the new version was ready. Well, it wasn't. A bunch of kids whined that it was all Mozilla's fault for having a file available on their public server, but while it's arguable that a service that is reachable by URL has no expectation of privacy, it's a hell of a lot harder to argue that having a service reachable by URL implies a warranty that it is safe to use.

Friends in the 90's would run telnet and web servers with "Username:" "Password:" "Credit Card Number:" prompts. It was funny to watch that some people would type in apparently real data, although we never verified.
UFC News: Dana White: Jeremy Stephens was an 'Extortion Victim'
Buyer beware. The original Lockitrons were OEMed from a Chinese company (they only really built the software) and damaged quite a few locks to the point keys no longer worked.

Far from an isolated case unfortunately. I replaced at least 4 of them myself.
Non sequitur much? Only two of those sentences have anything to do with each other, and one factoid argues against the interestingness of another.
What do you make of the other 60%?

That they're good people who allowed evil to triumph by doing nothing to stop it?
interesting.

do you mind pastebin-ning your apache conf and your mysql conf ? It would be nice to see what parameters are you tweaking.

Which VPS hosting are you using ?
Facebook’s 5% Solution in Data Centers
Fendi bag
The No. 1 Enemy of Creativity: Fear of Failure
Redhat/Micro Focus/JBoss And COBOL - 4 in a bed?
I just watched this episode today. Came here to find this comment, was not disappointed.

Of course, this means that HN is becoming more like Reddit. :-P
A-List folks get auto-assigned a boarding order 36 hours before a flight starting with A-16. A1-15 are the "Business Select" seats for which a premium is charged. So, on flights with many frequent fliers, many of the "A" slots may be not be available even to those who check in early.
I like how he foresaw the potential of the internet before many people even knew about it, and certainly before it became publicly accessible...

> Jobs: This will change: Computers will be essential in most homes.

> Playboy: What will change?

> Jobs: The most compelling reason for most people to buy a computer for the home will be to link it into a nationwide communications network. We’re just in the beginning stages of what will be a truly remarkable breakthrough for most people‐‑as remarkable as the telephone.
1.5 seconds is a lot of time to save off page load and this shouldn't be just ignored. Other people do ridiculous things to their architecture to shave off just a dozen milliseconds no one cares about.

I mean, KeepAlive shouldn't crash severs. Have you tried tuning other settings, like KeepAliveTimeout? It's either a config issue or general Apache issue, but it should be solvable in both cases. There is no unsolvable problem that would prevent a server from persisting connections under lighter load and dropping them when there is more traffic.
Because it sounds suspicious, and may lessen the credibility of the OP.
I'm talking about deployment, not working together.

Typical lisp development today usually involves using git and loading files into the image using SLIME.

And, yes, LispMs were very expensive and cpu-performed less well than a risc box.
Data Parallelism in Haskell
Manuel Chakravarty - Data Parallelism in Haskell
Toutes les formes d'hypnose
Votre Pouvoir de Persuasion Hypnotique Invisible
OK I had to look that up to understand what you meant (http://www.urbandictionary.com/define.php?term=i%20know%20yo...).

You're suggesting that my previous response is a total fail.

At the risk of my appearing to be totally thick, can I ask you to explain why?
You mean this: http://photosynth.net/

based on this: http://research.microsoft.com/en-us/um/redmond/groups/ivm/Ph...
Free and Premium Responsive WordPress Themes Collection
A few other types of responsive WordPress themes are extremely clean as well as modern looking. They are suitable to be used in any corporate and business websites.
> Maybe a better question is, "What is a typical workflow like for modifying production software?"

In a modern Common Lisp web server set up, you'll likely have a SWANK connection available for debugging and patching. You will have to write live-patching code to correctly lock, drop/unbind old definitions, rebind new definitions, and unlock. It will likely remind you of a DB migration script.

For a non-live upgrade, you'll have a process that starts up the new server image, gets it ready to receive connections, then switch the routing & drop the old server.
It's not too different from other systems, IMO.
For comments or posts?
I think it has less to do with ORM and more to do with laziness. Its really one line in the controller, if loggedin user is not the user trying to edit redirect.
Linode uptime varies according to data centre.

Lots of people use the Fremont centre. It is a dud.

I've hosted in Dallas without incident and currently I use Tokyo.
That is true for cancers without targeted therapies. But cancers such as CML, breast cancer, melanoma, etc, all now have targeted therapies against specific molecules (often tyrosine kinases).

While alkylating agents, etc, are still widely used, I think it's fair to say that the future that you have described is the present. We have the better approach, and now it's a matter of aggressively pursuing it (which is also happening).
Product colorizer pure CSS
Anvil - a Mac app for Pow
This will never happen for a variety of reasons -- but I have always lobbied to remove Columbus Day as a holiday and replace it with Election Day, hopefully encouraging a larger number of people to vote.
Should we choose languages for communication?
Sometimes we choose specific programming languages for specific problems; C for writing operating systems, Go for concurrency, etc. Should we choose specific spoken languages for specific problems? I imagine French or Spanish is probably better for describing arts and culture whereas maybe the reason Germans are such good engineers is because of their language..
You're not providing any data to say having KeepAlive on would've 'crushed' the server, actually quite the opposite. For example - with KeepAlive on, your site response time was 5.31s. With KeepAlive off, it was 6.87s. So with your own test it was slower to load.

With keepalive off, your server would spawn new connections for every request rather than re-using them. With mpm-worker and threads, that's not so bad. However I've seen a lot of people run pre-fork which uses processes instead of threads which can be a Bad Time(tm) with heavy spikes in traffic.

Anyway - found this here (not my site) - explains it fairly well: http://abdussamad.com/archives/169-Apache-optimization:-Keep...
Are 80s-style neural networks better at anything, or is the new stuff going to always be better?
Its got nothing to do with the age of the startup, and everything to do with the quality of the engineering. You see problems like this and worse in companies that have been around for years.

It would have been more responsible to privately notify the owner of the site rather than karma whoring a blog post to top of HN.
It's not just laziness. 99% of all framework tutorials I've seen out there completely ignores even basic authentication/authorization issues, which are universal to all real websites. This lack of attention to details is cultivated.
Quantum Mechanics Point To Reality As Being Just A Computer Simulation
Basic steps for bootstrapping your business
> Traditionalist men even believe in sacrificing their lives to save womens lives. A lot of modern men also believe in that sacrifice.

No, they really don't. Or rather they may say they do, but when it comes it, then they don't. See the recent study of ship evacuations for proof, it's women and children last.
Facebook (and now DataStax) has given me Apache Cassandra, and for that, I will be eternally grateful. Why did Zuck release it? It's so valuable and disruptive, feels like a "becuz I can" move.

I don't even keep a Facebook account, so to them I must be just about the worst moocher ever. :P
Interesting. Have you guys explored other alternatives beyond PayPal? I realize its probably difficult thing to do if credit cards are out of the equation completely but given the problems that could arise (freezes, etc)... It would seem having a backup plan beyond relying on a single source for any country would be smarter. Would be interested in knowing what you guys come up with.
Sorry, I didn't mean to imply that you said people shouldn't enjoy living out of a van.

I meant to draw attention to you writing that living in a van was an insincere (glib) and unrealistic (romantic) undertaking.
Never really thought about it, so I guess a couple million in the bank.
Don't give your data to this site until they fix this:

http://blog.ryankearney.com/2012/10/never-give-your-informat...
It's relatively common practice to have an url like this: /yourusername or /users/yourname or /users/32, which shows a public profile, and therefore to have a guessable url for it, and to have a link to edit your account on that page if you are that user.

That in itself is not a security problem, but having no access control obviously is.
Startup School Pre-Party
This seems terribly overblown. Do people forget the fact that Darpa finances things like the Darpa Challenge every year? And lets not forget that the Internet itself was once simply ARPANET. Also that really cool internet challenge where groups had to find 10 red balloons at geographically diverse locations.

It seems like dumb fearmongering to think that an organization that has made bets like that is simply trying to get kids to mass produce weapons or something.
Internet of Things is inevitable. Its a human tendency to try to connect with everything around them. It started with telephones and then emails, mobile phones, social networks...now that we have established a means of communication between at least half of the worlds population, via one of the above mentioned technology, its time to start connecting our house, cars and even pets.

I think there is going to be a Pandora (ref to movie Avatar) like reality where everything is connected, but in case of humans the 'Eywa' will be 'Internet'.
Working in a cool company doesn't automatically mean the developer is competent. Neither is working for a large corp for that matter. I've seen far too many examples of this, unfortunately.
I really don't think it has anything to do with the startup being 10 minutes old. That's security 101 we're talking about ...
Ah ok, I didn't get that part.
Everything you need to know about angel investors [infographic]
گروه طراحی وب سایت ارج گستر
گروه طراحی وب سایت ارج گستر-طراحی و برنامه نویسی وب سایت در مشهد
If they want to affect the environment, or perform computations, they have to use energy. If they have to use energy, they have to get energy from somewhere. Hydrocarbons don't last for more than a couple centuries. Heavy-element fission will get you another century. Light-element fusion will get you another ten thousand years.

Whither comes the energy for a million year civilization? Should they ignore their star? Just let all that power go streaming by?

(Dyson won theHeineman Prize, Harvey Prize, Wolf Prize, Templeton Prize, Pomeranchuk Prize, Fermi Award, and the Poincare Prize; but did not win a Nobel.)
"This enables a simpler and more effective way of keeping sites spam free as well as taking a stand for human rights."

Over-stating the security implications of their system for the purposes of getting press for an upcoming event is short-sighted.
Somebody fund this guys 'how to make lemonade' book right now. Best advice on here.
There's some pixelation around the edges.
1) When you have a hypothesis, you conduct an experiment.

2) When your experiment yields results that match your hypothesis, you consider that evidence.

3) When you have sufficient evidence, you upgrade your hypothesis to a theorem.

According to the Wikipedia article, we've got at least two probes that are producing results in line with our hypotheses. The bar for wikipedia is "sourced", not proven theorem with scientific rigor. In this case, we're in some nebulous area between 2 and 3. I think that meets the bar for an encyclopedia, which is intended to serve as a summary for these types of things.

Hit the sources and the transitive closure of references for more details.
Nice little app. Would be handy to be able to edit the generated .dev URL to be different from the folder.
I think it's a fantastic idea for a variety of reasons:
1) It's a great political compromise.
2) It makes the day a celebration of the best part of our past.
3) It makes the day aspirational by encouraging exploration in the future.
I know site like carbonate let you mail them a hard drive, but they're aimed at the full computer restore demographic.
I think its an interesting concept if you can get JBoss to replicate the functionality of the OS and hardware behind most COBOL running on big iron but on low cost 'distributed' servers. Running COBOL is possible in non mainframe contexts already. Running COBOL with all the benefits of a mainframe without the mainframe cost and mainframe OS has not materialized. Its been surprisingly resilient to disruption so far. If you could offer all the functionality at a significant decrease in cost per mip, you would have a winner and a lot of fans (eventually as it became proven and big CIOs started to trust it). There are plenty of less critical workloads out there that could be migrated out though if they could access the same data cost effectively. What do you think the big challenges are?
Räumung          
Räumung , Räumung Wien
Räumung in Wien und Österreichweit
Wohnungen räumen im Raum Wien und Österreichweit. Wir stehen Ihnen stets mit einem kompetenten Team, jahrelanger Erfahrung und erschwinglichen Preisen in Sachen Räumungen zur Verfügung.
Your "Install Pow" doesn't work with a drive name which has spaces.
eg. /bin/sh /Volumes/Macintosh HD/Downloads/Anvil.app/Contents/Resources/InstallPow.sh; exit

needs to escape the space. App itself looks polished, checking it out now!
From one of my other replies to the KeepAlive discussion: http://news.ycombinator.com/item?id=2588783

I promise you my little server was getting more traffic than that, and since patio11 -- another vocal "turn off KeepAlive" advocate -- personally commented in that thread that turning off KeepAlive directly resolved their site outage, I think I'm going to stick with what I've got.

The server is already using mpm-worker, as well as fcgid carefully tuned to make PHP nice and snappy without eating all of the server's available memory.

Final point: site response times aren't the only metric a server admin should care about. A server admin should also -- and maybe even primarily -- care about concurrent connections. If I can serve thousands of simultaneous connections at 6.87s or hundreds of simultaneous connections at 5.31s, guess which one I choose?
Ah, but every word in that paragraph is a correctly spelled word. The paragraph would sale right through the spelling checker.
It may be more natural for humans to think logarithmically than linearly
I'm using Linode. I can't say enough good things about them, btw. Their support is mind-blowingly good, and their service isn't too far behind.

I have zero incentive to post my config, sorry. One, it would take me an hour or so to format it for general consumption; two, it would take me many many hours more to justify every single setting in it to anybody who read it.

We've got a website overhaul in the works, which will feature a blog which will actually get used & updated, and one of the first items on there will be our server configurations. Promise.
CSS Pictures
Think of durability like the bank telling you that your money is 99.99999999% secure in their vault, but you can only access it from 9 to 5, Monday to Friday. The bank's "uptime" is really low (40 hours / 168 hours * 100%) but your money's "durability" is quite high.
Free Lunch Friday: Over training?
I'm very glad you didn't decide to go the Mac App Store route -- as sad as it sounds, MAS has incredible friction compared to an old fashioned zip
That's the thing that's been bugging me for the past year or so. I don't know about other people, but it's clear to me that Facebook's default privacy settings — the way it's nicely set up so that you overshare with the whole world — is NOT how most users would use it.

So why keep it around, Facebook?* From my vantage point, it's kinda evil, and it's anti-user. Why can't you stop being Twitter and just be an awesome private network?

* (rhetorical question)
Thats not really how Pow[1] works. It's weird that there isn't any mention of Pow on that page if that's what it's using in the backend. I didn't download it since I'm not on 10.7, maybe it mentions it later.

I wrote something similar (https://github.com/rktjmp/ker-pow) a while ago but never considered using it to actually make new ~/.pow/ links, I might add that in. Anvil is probably much more useful!

[1] http://pow.cx
Oh come now. This is hardly less ethical than the methods used by e.g. Fox News or the Daily Mail, but we seem to be mostly comfortable with that.
It's high time that somebody replaces GIF with a modern alternative, seriously.
There is already a lot of mainframe offload. It seems that the middle range of mips is the sweet spot. Taking advantage of the services systems like JBOSS gives is, quite possibly, the last piece in the puzzel.
That's a good point. I miss the "social utility" days of the service. In that sense it's hugely valuable. (One of the best things about the internet, really.)

It's the push for users to overshare/go frictionless/"Like" the internet etc/viral gaming stuff that makes me uncomfortable.
Vim Tutorial Videos
In case anyone wants to read more about skip scans, here's the link: http://docs.oracle.com/cd/B10501_01/server.920/a96533/optimo...
The pain of typing these letters, this alphabet soup, it's unbearable. It gives me nightmares.

Cooper, the Thought Leaders, to the rescue!
Bad engineering properties of oo languages
But Columbus is an legend precisely because he didn't just explore, he created a beachhead which is more important historically than plain exploration.
Would you mind posting a list of any other projects you guys have worked on or are currently working on so I know what to avoid like the plague?
Command line tricks
What's not very clear to me is whether they have any idea what they're doing when it comes to security, or how to respond properly to a legitimate security hole. It's difficult to trust someone who builds a service like this and leaves securing personal keys as "something we'll get around to."
It's incompetence (at security), but not malice, and they were willing to fix the problem quickly.

It's a problem of competing claims -- you want to keep the world safe so end users are protected, and are willing to use new (secure) services, but you also want to avoid discouraging developers (either these guys, or others who see how they're being ragged on and choose not to develop something on their own).

It's not a fundamental flaw in the application, just an admin interface error. Yes, they should have known to test, but I reserve the nuclear hate for willfulness, since hate and vitriol is sometimes in short supply.